Dovecot ManageSieve Service '.sieve' Files Directory Traversal Vulnerability

Bugtraq ID:	32582
Class:	Input Validation Error
CVE:	CVE-2008-5301
Remote:	Yes
Local:	No
Published:	Nov 17 2008 12:00AM
Updated:	Sep 28 2009 08:00PM
Credit:	The vendor reported this issue.
Vulnerable:	Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Dovecot ManageSieve 0.11 Dovecot ManageSieve 0.10.3 Dovecot ManageSieve 9.3
Not Vulnerable:	Dovecot ManageSieve 0.11.1 Dovecot ManageSieve 0.10.4 Dovecot ManageSieve 9.4

Dovecot ManageSieve Service '.sieve' Files Directory Traversal Vulnerability

The Dovecot ManageSieve service is prone to a directory-traversal vulnerability because the application fails to adequately sanitize user-supplied input. An attacker may exploit this issue to read or write to arbitrary '.sieve' files.

A successful attack may allow an attacker to obtain potentially sensitive information, cause denial-of-service conditions, or execute arbitrary script code in the context of another user; this may aid in further attacks.

Versions *prior to* the following are affected:

Dovecot 1.2 ManageSieve 0.11.1
Dovecot 1.1 ManageSieve 0.10.4
Dovecot 1.0.15 ManageSieve 9.4

Dovecot ManageSieve Service '.sieve' Files Directory Traversal Vulnerability

An attacker can exploit this issue using standard client applications.

Dovecot ManageSieve Service '.sieve' Files Directory Traversal Vulnerability

Solution:
The vendor has released an update. Please see the references for details.


Ubuntu Ubuntu Linux 8.10 lpia

• Ubuntu dovecot-common_1.1.4-0ubuntu1.3_lpia.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-common_1.1.4-0ubun tu1.3_lpia.deb


• Ubuntu dovecot-dev_1.1.4-0ubuntu1.3_lpia.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-dev_1.1.4-0ubuntu1 .3_lpia.deb


• Ubuntu dovecot-imapd_1.1.4-0ubuntu1.3_lpia.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-imapd_1.1.4-0ubunt u1.3_lpia.deb


• Ubuntu dovecot-pop3d_1.1.4-0ubuntu1.3_lpia.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-pop3d_1.1.4-0ubunt u1.3_lpia.deb

Ubuntu Ubuntu Linux 9.04 i386

• Ubuntu dovecot-common_1.1.11-0ubuntu4.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-common_1 .1.11-0ubuntu4.1_i386.deb


• Ubuntu dovecot-dev_1.1.11-0ubuntu4.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-dev_1.1. 11-0ubuntu4.1_i386.deb


• Ubuntu dovecot-imapd_1.1.11-0ubuntu4.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-imapd_1. 1.11-0ubuntu4.1_i386.deb


• Ubuntu dovecot-pop3d_1.1.11-0ubuntu4.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-pop3d_1. 1.11-0ubuntu4.1_i386.deb


• Ubuntu dovecot-postfix_1.1.11-0ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-postfix_ 1.1.11-0ubuntu4.1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu dovecot-common_1.0.10-1ubuntu5.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-common_1.0.10-1ubu ntu5.2_powerpc.deb


• Ubuntu dovecot-dev_1.0.10-1ubuntu5.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-dev_1.0.10-1ubuntu 5.2_powerpc.deb


• Ubuntu dovecot-imapd_1.0.10-1ubuntu5.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-imapd_1.0.10-1ubun tu5.2_powerpc.deb


• Ubuntu dovecot-pop3d_1.0.10-1ubuntu5.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-pop3d_1.0.10-1ubun tu5.2_powerpc.deb

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu dovecot-common_1.1.11-0ubuntu4.1_lpia.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-common_1.1.11-0ubu ntu4.1_lpia.deb


• Ubuntu dovecot-dev_1.1.11-0ubuntu4.1_lpia.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-dev_1.1.11-0ubuntu 4.1_lpia.deb


• Ubuntu dovecot-imapd_1.1.11-0ubuntu4.1_lpia.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-imapd_1.1.11-0ubun tu4.1_lpia.deb


• Ubuntu dovecot-pop3d_1.1.11-0ubuntu4.1_lpia.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-pop3d_1.1.11-0ubun tu4.1_lpia.deb


• Ubuntu dovecot-postfix_1.1.11-0ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-postfix_ 1.1.11-0ubuntu4.1_all.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu dovecot-common_1.1.4-0ubuntu1.3_sparc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-common_1.1.4-0ubun tu1.3_sparc.deb


• Ubuntu dovecot-dev_1.1.4-0ubuntu1.3_sparc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-dev_1.1.4-0ubuntu1 .3_sparc.deb


• Ubuntu dovecot-imapd_1.1.4-0ubuntu1.3_sparc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-imapd_1.1.4-0ubunt u1.3_sparc.deb


• Ubuntu dovecot-pop3d_1.1.4-0ubuntu1.3_sparc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-pop3d_1.1.4-0ubunt u1.3_sparc.deb

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu dovecot-common_1.1.4-0ubuntu1.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-common_1.1.4-0ubun tu1.3_powerpc.deb


• Ubuntu dovecot-dev_1.1.4-0ubuntu1.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-dev_1.1.4-0ubuntu1 .3_powerpc.deb


• Ubuntu dovecot-imapd_1.1.4-0ubuntu1.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-imapd_1.1.4-0ubunt u1.3_powerpc.deb


• Ubuntu dovecot-pop3d_1.1.4-0ubuntu1.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-pop3d_1.1.4-0ubunt u1.3_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu dovecot-common_1.0.10-1ubuntu5.2_sparc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-common_1.0.10-1ubu ntu5.2_sparc.deb


• Ubuntu dovecot-dev_1.0.10-1ubuntu5.2_sparc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-dev_1.0.10-1ubuntu 5.2_sparc.deb


• Ubuntu dovecot-imapd_1.0.10-1ubuntu5.2_sparc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-imapd_1.0.10-1ubun tu5.2_sparc.deb


• Ubuntu dovecot-pop3d_1.0.10-1ubuntu5.2_sparc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-pop3d_1.0.10-1ubun tu5.2_sparc.deb

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu dovecot-common_1.1.4-0ubuntu1.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-common_1 .1.4-0ubuntu1.3_i386.deb


• Ubuntu dovecot-dev_1.1.4-0ubuntu1.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-dev_1.1. 4-0ubuntu1.3_i386.deb


• Ubuntu dovecot-imapd_1.1.4-0ubuntu1.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-imapd_1. 1.4-0ubuntu1.3_i386.deb


• Ubuntu dovecot-pop3d_1.1.4-0ubuntu1.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-pop3d_1. 1.4-0ubuntu1.3_i386.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu dovecot-common_1.0.10-1ubuntu5.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-common_1 .0.10-1ubuntu5.2_i386.deb


• Ubuntu dovecot-dev_1.0.10-1ubuntu5.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-dev_1.0. 10-1ubuntu5.2_i386.deb


• Ubuntu dovecot-imapd_1.0.10-1ubuntu5.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-imapd_1. 0.10-1ubuntu5.2_i386.deb


• Ubuntu dovecot-pop3d_1.0.10-1ubuntu5.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-pop3d_1. 0.10-1ubuntu5.2_i386.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu dovecot-common_1.0.10-1ubuntu5.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-common_1 .0.10-1ubuntu5.2_amd64.deb


• Ubuntu dovecot-dev_1.0.10-1ubuntu5.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-dev_1.0. 10-1ubuntu5.2_amd64.deb


• Ubuntu dovecot-imapd_1.0.10-1ubuntu5.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-imapd_1. 0.10-1ubuntu5.2_amd64.deb


• Ubuntu dovecot-pop3d_1.0.10-1ubuntu5.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-pop3d_1. 0.10-1ubuntu5.2_amd64.deb

Ubuntu Ubuntu Linux 9.04 amd64

• Ubuntu dovecot-common_1.1.11-0ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-common_1 .1.11-0ubuntu4.1_amd64.deb


• Ubuntu dovecot-dev_1.1.11-0ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-dev_1.1. 11-0ubuntu4.1_amd64.deb


• Ubuntu dovecot-imapd_1.1.11-0ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-imapd_1. 1.11-0ubuntu4.1_amd64.deb


• Ubuntu dovecot-pop3d_1.1.11-0ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-pop3d_1. 1.11-0ubuntu4.1_amd64.deb


• Ubuntu dovecot-postfix_1.1.11-0ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-postfix_ 1.1.11-0ubuntu4.1_all.deb

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu dovecot-common_1.1.11-0ubuntu4.1_sparc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-common_1.1.11-0ubu ntu4.1_sparc.deb


• Ubuntu dovecot-dev_1.1.11-0ubuntu4.1_sparc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-dev_1.1.11-0ubuntu 4.1_sparc.deb


• Ubuntu dovecot-imapd_1.1.11-0ubuntu4.1_sparc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-imapd_1.1.11-0ubun tu4.1_sparc.deb


• Ubuntu dovecot-pop3d_1.1.11-0ubuntu4.1_sparc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-pop3d_1.1.11-0ubun tu4.1_sparc.deb


• Ubuntu dovecot-postfix_1.1.11-0ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-postfix_ 1.1.11-0ubuntu4.1_all.deb

Ubuntu Ubuntu Linux 8.10 amd64

• Ubuntu dovecot-common_1.1.4-0ubuntu1.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-common_1 .1.4-0ubuntu1.3_amd64.deb


• Ubuntu dovecot-dev_1.1.4-0ubuntu1.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-dev_1.1. 4-0ubuntu1.3_amd64.deb


• Ubuntu dovecot-imapd_1.1.4-0ubuntu1.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-imapd_1. 1.4-0ubuntu1.3_amd64.deb


• Ubuntu dovecot-pop3d_1.1.4-0ubuntu1.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-pop3d_1. 1.4-0ubuntu1.3_amd64.deb

Ubuntu Ubuntu Linux 9.04 powerpc

• Ubuntu dovecot-common_1.1.11-0ubuntu4.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-common_1.1.11-0ubu ntu4.1_powerpc.deb


• Ubuntu dovecot-dev_1.1.11-0ubuntu4.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-dev_1.1.11-0ubuntu 4.1_powerpc.deb


• Ubuntu dovecot-imapd_1.1.11-0ubuntu4.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-imapd_1.1.11-0ubun tu4.1_powerpc.deb


• Ubuntu dovecot-pop3d_1.1.11-0ubuntu4.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-pop3d_1.1.11-0ubun tu4.1_powerpc.deb


• Ubuntu dovecot-postfix_1.1.11-0ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-postfix_ 1.1.11-0ubuntu4.1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu dovecot-common_1.0.10-1ubuntu5.2_lpia.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-common_1.0.10-1ubu ntu5.2_lpia.deb


• Ubuntu dovecot-dev_1.0.10-1ubuntu5.2_lpia.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-dev_1.0.10-1ubuntu 5.2_lpia.deb


• Ubuntu dovecot-imapd_1.0.10-1ubuntu5.2_lpia.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-imapd_1.0.10-1ubun tu5.2_lpia.deb


• Ubuntu dovecot-pop3d_1.0.10-1ubuntu5.2_lpia.deb
  http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-pop3d_1.0.10-1ubun tu5.2_lpia.deb

Dovecot ManageSieve Service '.sieve' Files Directory Traversal Vulnerability

References:

• [Dovecot] ManageSieve SECURITY hole: virtual users can edit scripts of other vir (Stephan Bosch)
  
• Dovecot ManageSieve Server Homepage (Dovecot)
  
• Vendor Homepage (Dovecot)